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Top Stories 

• A dust storm closed a 20-mile section of Interstate 15 in Idaho December 29, affecting a 
segment of the interstate north of Idaho Falls that serves an average of 21,500 vehicles a 
day. - Reuters (See item 14 ) 

• Researchers claim to have found proof that the Stuxnet and Duqu malware have the same 
writers, The Register reported December 30. Based on the platform and drivers involved, at 
least three new families of advanced malware may be in circulation. - The Register (See 
item 26) 
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Energy Sector 

Current Electricity Sector Threat Alert Levels: Physical: LOW, Cyber: LOW 

Scale: LOW, GUARDED, ELEVATED, HIGH, SEVERE [Source: ISAC for the Electricity Sector (ES-ISAC) - 
rhttp://www.esisac.coml 

1. December 29, KRQE 13 Albuquerque - (New Mexico) Gas pump tapped for 

hundreds of gallons. A Northeast Heights gas station in Albuquerque, New Mexico, 
said two thieves stole thousands of dollars in gas from one gas pump December 26. For 
three hours on the night of December 26 the manager of the Texaco on the corner of 
Lomas and Juan Tabo boulevards said two crooks pilfered hundreds of gallons of gas. 
“He actually opens the pump up and he removes and tampers with [the] thing that 
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allows it to flow after the counter has stopped,” a spokesman said. The two came back 
a second time, and it is the same routine. Finally they came back a third time. The 
thefts were discovered the next day during a review of the overnight transactions. That 
is when they checked out the surveillance video. In order to start the pumps the crooks 
had to use a credit card. A spokesman said the same card was used during all the thefts. 
Source: http://www.krqe.com/dpp/news/crime/gas-pump-tapped-for-hundreds-of- 
gallons 

2. December 29, Associated Press - (California) Calif, pipeline company charged in 
2010 oil spill. A California pipeline company and several executives have been charged 
in connection with an oil spill last year in the Port of Los Angeles, prosecutors said 
December 29. The 61 -count complaint accuses Crimson Pipeline Management Inc. and 
its operators of unlawfully causing and allowing the spill, as well as failing to report the 
accident to authorities. Among those facing charges are the company president and 
operations manager. If convicted, the executives could each face up to 36 years in jail 
and the company could be fined hundreds of thousands of dollars, prosecutors said. 
Investigators said they became aware of a pipeline breach when oil seeped into a 
channel during a storm late last year. They gathered samples of the oil and were able to 
identify a hydrocarbon fingerprint that determined the product came from Crimson. A 
gash in the pipeline’s casing was found and was wrapped before the carrier pipe was 
pulled out of the ground in October. More than 1 ,000 gallons of crude oil and 290,000 
gallons of contaminated wastewater have been recovered, authorities said. 

Source: http://www.cbsnews.com/8301-505245 162-5734987 1/calif-pipeline- 
company-charged-in-20 1 0-oil-spill/ 

3. December 29, Associated Press - (North Carolina) Audit: N.C. agency rarely fined 
gas rules violators. A state agency in North Carolina responsible for checking the 
safety of propane and other liquefied petroleum (LP) gas facilities rarely fined 
operators even when they repeatedly violated regulations, according to an audit 
released December 29. Inspectors for the standards division of the state Department of 
Agriculture and Consumer Services found 7,466 violations representing potential 
threats to public health and safety in the year after October 2009, when the agency was 
authorized to hand out stiffer civil penalties, the audit by State Auditor found. LP gas, 
primarily propane, can burn or explode if it comes in contact with a spark. The 
violations included nearly 200 cases in which emergency shutoff valves did not work, 
the report said. Other violations included gas storage plants that were not locked when 
unattended, leaks around tanks and pipes, and documentation deficiencies, the report 
said. Nearly 10 percent of the violations were repeat discoveries of problems that had 
not been fixed, with some operators having as many as seven repeat violations, the 
report said. 

Source: http://www.wral.com/news/state/nccapitol/storv/10543050/ 

4. December 29, Glen Falls Post-Star - (New York) Probe into leak continues. The 
New York Department of Environmental Conservation is investigating why employees 
of the Cumberland Farms store at the center of a December 27 gas leak were not able to 
shut off the malfunctioning gas pump that leaked hundreds of gallons of gasoline. 
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Hudson Falls firefighters stopped the leak by shutting off the power at the Main Street 
store, officials said. At that point, the leak was unabated, with emergency shutoff 
mechanisms in the pump apparently malfunctioning, officials said. A spokesman said 
three employees were working at the time, and one “had gone through the procedures 
to shut the pump off but was unable to shut it off.” The Washington County Public 
Safety director said it was not known why the store’s staff was unable to shut off the 
pumps before firefighters arrived and why the pump’s safety features failed. Gasoline 
vapors from the fuel in the storm drain system caused 20 to 25 explosions underground 
late December 27, either as the pressure from the fumes built up or because something 
ignited the vapors. Numerous manhole covers and storm drain covers were blown free, 
and homes were damaged. 

Source: http://poststar.com/news/local/probe-into-leak-continues/article dc077c74- 
32a2-llel-97a4-001871e3ce6c.html 



For another story, see item 19 
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Chemical Industry Sector 

5. December 29, Nogales International - (Arizona; International) Chemical load at port 
leads to arrest, detour. A woman from Nogales, Mexico, was detained December 28 
by U.S. Customs and Border Protection Officers in Nogales after they discovered five 
55-gallon drums of a potential methamphetamine precursor in the back of the van she 
was driving. The Nogales Fire Department was called to the Mariposa Port of Entry 
after Customs and Border Protection (CBP) reported a Mexico-bound van carrying 
barrels of an unknown chemical. It turned out to be monomethylamine, an ingredient 
used as a component in some pesticides and pharmaceuticals - as well as the illicit 
manufacturing of meth. The woman was turned over to Immigration and Customs 
Enforcement’s Homeland Security Investigations and the van bearing Sonora plates 
and its contents was seized, CBP officials said. 

Source: http://www.nogalesinternational.com/news/chemical-load-at-port-leads-to- 
arre st- detour/article ea48062e-3260-l lel-al 12-0019bb2963f4.html 



For another story, see item 13 
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Nuclear Reactors, Materials and Waste Sector 

6. December 30, Associated Press - (Connecticut) Feds rap Millstone over failures to 
win approvals. Federal regulators said Dominion Resources Inc. failed over the past 
two years to receive approvals before changing various systems at its Millstone nuclear 
plant in Waterford, Connecticut. The Day of New London reported December 30 that 
an audit by the Nuclear Regulatory Commission (NRC) released December 29 found 
Millstone officials had an appropriate system for meeting its commitments to federal 
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regulators, but it was not often followed. The audit said that in 10 cases Dominion 
misused the process, treating federal requirements as if they were minor commitments. 
A NRC spokesman said Millstone’s actions did not pose a danger to the public. But he 
said the audit findings were unusual. A Millstone spokesman said Dominion is 
correcting the problems and that the main issue concerns the failure to file paperwork 
documenting changes. 

Source: http://washingtonexaminer.com/news/business/2011/12/feds-rap-millstone- 
over-failures-win-approvals/2046681 

7. December 30, WECT 6 Wilmington - (North Carolina) Brunswick Nuclear Plant 
flagged for possible flooding issue. The U.S. Nuclear Regulatory Commission (NRC) 
said fuel oil tank rooms that serve the Brunswick Nuclear Plant’s emergency diesel 
generators were not properly protected from possible flooding, WECT 6 Wilmington 
reported December 30. According to a news release from the NRC, the finding was of 
“low to moderate safety significance” and will lead to increased inspection of the 
Southport, North Carolina facility. The NRC release said the violation involved the 
failure to identify and correct issues in the fuel oil tank rooms that made them more 
susceptible to flooding during a hurricane. In response to the findings, plant officials 
have installed new sealant material to close openings on the oil tank rooms and 
constructed barriers to limit possible wave run-up to the facility. 

Source: http://www.wect.com/story/16417366/brunswick-nuclear-plant-flagged-for- 
possible-flooding-issue 

T Return to top ] 

Critical Manufacturing Sector 

Nothing to report 
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Defense Industrial Base Sector 

8. December 28, Associated Press - (Mississippi) OSHA cites Mississippi shipyard. The 
Occupational Safety and Health Administration (OSHA) has cited a Pascagoula, 
Mississippi shipyard for 50 safety violations and has proposed penalties of $176,444, 
the Associated Press reported December 28. OSHA officials said in a news release that 
the penalties against Huntington Ingalls Industries and five subcontractors come from a 
June inspection after receiving a complaint about safety hazards. Huntington Ingalls 
was cited for violations carrying penalties of $166,300. The violations included blocked 
exits; tripping and fall hazards; allowing lead, arsenic, and cadmium dust to accumulate 
in a lunch area; and the dispensing of flammable liquids in improper containers. Five 
subcontractors were cited for violations that included improper handling of compressed 
gas cylinders and other safety and electrical hazards. One subcontractor had no 
monetary penalty. The companies have up to 15 business days to appeal the citations. 
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Source: http://www.cbsnews.com/8301-5Q5245 162-57349323/osha-cites-mississippi- 
shipyard/ 
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Banking and Finance Sector 

9. December 30, Associated Press - (Nevada; International) Feds: 6 indicted in Internet 
based car-selling scheme that took in over $4 million. A federal grand jury indicted 
six foreign nationals on charges that they defrauded hundreds of customers out of more 
than $4 million in bogus Internet car sales, federal prosecutors said December 29. The 
24-count indictment returned December 28 alleges a scheme in which vehicles were 
offered for sale on legitimate Web sites that deal in auto trading, according to a 
statement from the U.S. attorney’s office. The six defendants — from Germany, 

Russia, Romania and Latvia — are accused of collecting payments from hundreds of 
would-be buyers nationwide, siphoning millions of dollars to Europe, and never 
delivering a vehicle, the indictment said. The alleged leaders of the scam are both in 
federal custody in Nevada on charges related to bulk cash smuggling. One of the men 
monitored the fraudulent bank accounts to determine if funds had been deposited, the 
indictment said. The money was then withdrawn — primarily in cash — and delivered 
to the leaders. The two then allegedly wired the money from the United States to other 
countries, mailed the funds in concealed packages to Berlin, or concealed the funds in 
personal carry-on luggage while traveling to Germany, according to the indictment. At 
least 1 10 bank accounts were opened to fraudulently receive the funds, according to the 
indictment. From September 4, 2007 until October 5, 2010, victims deposited at least 
$4 million into the accounts. The defendants face charges including conspiracy to 
commit bank and wire fraud and money laundering. If convicted, each could face 
sentences totaling hundreds of years in federal prison. 

Source: http://www.washingtonpost.com/national/feds-6-indicted-in-intemet-based-car- 
selling-scheme-that-took-in-over-4-million/2011/12/30/gIQABzxmPP story.html 

10. December 30, Sarasota Herald Tribune - (GFlorida) FDIC files malpractice lawsuit 
against Icard Merrill Sarasota law firm over First Priority Bank loan. The Federal 
Deposit Insurance Corp. (FDIC) has filed a malpractice suit against one of Sarasota, 
Florida’s most prominent law firms and one of its senior partners in connection with a 
$5.3 million loan made by the now defunct First Priority Bank, the Sarasota Herald- 
Tribune reported December 29. The FDIC’s lawsuit claims an Icard Merrill attorney 
breached his fiduciary duty by failing to inform First Priority’s board of directors that 
he represented nearly all the parties in a deal to develop the River Meadows property, 
along the Upper Manatee River. The lawsuit, filed in federal court in Tampa, also 
claims that he failed to tell First Priority’s board that an option to buy a 25-acre parcel 
of land, which comprised part of the bank’s collateral for the loan, did not exist. “As a 
proximate result of the defendants’ wrongful conduct, the bank lost over $4,596 
million,” the FDIC concluded in its December 23 lawsuit. Fegal action by the FDIC 
follows a similar lawsuit against Icard Merrill and the attorney filed by six investors, 
who joined a former Fongboat Key businessman in 2005 to develop River Meadows. In 
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that case, Icard Merrill agreed to pay a $1.4 million settlement, on the condition that the 
payment was not an admission of guilt. As First Priority’s receiver, the FDIC is now 
trying to recoup some of the $72 million lost when it shut down the Bradenton bank in 
August 2008. 

Source: http://www.heraldtribune.com/article/201 1 1229/ ARTICLE/ 1 1 1229521/- 
l/news?p=all&tc=pgall 

11. December 29, U.S. Department of Treasury - (International) Treasury targets key 
Panama-based money laundering operation linked to Mexican and Colombian 
drug cartels. The U.S. Department of the Treasury’s Office of Foreign Assets Control 
(OFAC) December 29 designated two Lebanese-Colombian nationals as Specially 
Designated Narcotics Traffickers (SDNTs) due to their significant role in international 
money laundering activities involving drug trafficking proceeds. OFAC also designated 
nine other individuals and 28 entities in Colombia, Panama, Lebanon, and Hong Kong 
with ties to the men. The December 29 action, taken pursuant to the Foreign Narcotics 
Kingpin Designation Act, prohibits U.S. persons from conducting financial or 
commercial transactions with these entities and individuals and freezes any assets the 
designees may have under U.S. jurisdiction. “By designating these individuals and 
companies we are exposing a significant international money laundering network, 
forcing them out of the international financial system, and undermining their ability to 
launder drug money through a global support network for the Mexican and Colombian 
drug cartels,” the director of OFAC said. Treasury took the actions in close 
coordination with investigations by the Drug Enforcement Administration, Immigration 
and Customs Enforcement, and the New York City Police Department. 

Source: http://www.treasury.gov/press-center/press-releases/Pages/tgl390.aspx 

12. December 29, New York Daily News - (New York; Virginia) Dapper Bandit is 
unmasked: FBI says prolific Manhattan bank robber is Dana Connor, 52. The 
“Dapper Bandit” — a natty dresser wanted for robbing 10 New York City banks in 
recent months — was identified by the feds December 29 as an ex-convict with a 
distinctive tattoo on his chest. The FBI believes the suspect, who has been locked up 
previously for knocking over banks, is the crook who likes to look good while he robs. 
And the FBI says that the bandit — who has the words “Moe Love” tattooed on his 
chest — may be a commuter: investigators believe he may be living in Virginia and 
traveling up to New York to commit the heists, which began in September. Dressed in a 
spiffy suit and tie, he has hit banks from Midtown to Tribeca, and made off with cash 
every time, authorities said. He generally threatens tellers that he is armed with a 
weapon, but during one heist he whipped out a black handgun, authorities said. His 
most recent caper came December 27 at a Citibank branch. 

Source: http://www.nydailynews.com/new-york/dapper-bandit-unmasked-fbi-prolific- 
manhattan-bank-robber-dana-connor-52-article-1.998609?localLinksEnabled=false 



For more stories, see items 21 and 25 
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Transportation Sector 



13. December 30, Daytona Beach News-Journal - (Florida) Traffic on the move along 
crash site on 1-95 in Port Orange. Traffic was moving smoothly December 30 in the 
northbound lanes of Interstate 95 near Port Orange, Florida, after they were damaged in 
a fiery crash early December 29. The roadway reopened shortly after midnight after 
paving crews patched a 100 foot long stretch of roadway damaged in the chain reaction 
collision that closed the interstate and killed the driver of one of the four vehicles 
involved, the Florida Highway Patrol reported. A tractor-trailer rig carrying canisters of 
methyl bromide, a pesticide, burst into flames after plowing into the wreckage of a log 
truck, a U.S. Postal Service truck, and a passenger car about 3:25 a.m., the Florida 
Highway Patrol said. The rumbling of the explosions could be heard for miles, 
reportedly as far away as Ormond Beach. Repair of the 100-foot stretch of asphalt 
damaged by the fire was completed about midnight, and the northbound lanes were 
reopened shortly afterward, a Volusia County dispatch official said. Cleanup and 
repaving efforts were pushed back several times December 29 after a leak developed 
from one of the canisters holding the methyl bromide, affecting a crane operator and 
another person participating in the cleanup efforts, said a Florida Highway Patrol 
spokeswoman. A fire also redeveloped on the shoulder of the northbound lanes and the 
trailer used to haul the chemicals also reignited, she said. The driver of the chemical 
hauler died at the scene while five others were taken to Halifax Health Medical Center 
in Daytona Beach for treatment of reportedly minor injuries. In addition, the Port 
Orange’s Public Safety director said four Port Orange police officers were taken to the 
Halifax facility in Port Orange for treatment of chemical inhalation and exposure. He 
said all seemed alright, but were experiencing some discomfort. 

Source: http://www.news-ioumalonline.com/news/local/east-volusia/201 1/12/30/fiery- 
chain-reaction-crash-kills-l-closes-i-95-northbound.html 



14. December 29, Reuters - (Idaho) Massive dust storm closes interstate in Idaho. A 
dust storm churned by winds of up to 50 miles per hour forced a 20-mile closure of an 
interstate in Idaho December 29, and highway officials scrambled to divert thousands 
of motorists near Idaho Falls. Dirt blowing off cropland drastically reduced visibility 
for much of the day along a portion of Interstate 15, the north-south route that runs 
from California to Montana and intersects Salt Lake City and Las Vegas. The early 
morning closure ordered by the Idaho Transportation Department was expected to 
extend into the evening hours and go into effect again late December 30, when a 
second Pacific storm front was forecast to unleash high winds. State highway officials 
said it was rare for a storm this time of year to sweep large clouds of dirt across the 
Upper Snake River Plain in the high desert of eastern Idaho. “This may be the first time 
we have ever closed the interstate for a dust storm in December,” a spokesman said. 

The closure affected a segment of the interstate north of Idaho Falls that serves an 
average of 21,500 vehicles a day. Motorists were detoured along lesser-trafficked 
federal highways east of the Snake River. 

Source: http://www.chicagotribune.com/news/sns-rt-us-duststorm-idahotre7bt03w- 
20111229,0,2858353.story 
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15. December 29, Associated Press - (Alaska; International) Alaska volcano sends ash 
plume into sky. A volcano in Alaska’s Aleutian Islands sent up an ash cloud December 
29 that prompted scientists to increase the alert level for commercial aircraft traffic. 

The Alaska Volcano Observatory said satellite images showed Cleveland Volcano had 
spewed ash 15,000 feet into the air in a cloud that moved east-southeast. The U.S. 
Geological Survey scientist-in-charge called it a small explosion. “It’s not expected to 
cause a disruption to big international air carriers,” he said. But the event drew strong 
interest from air carriers. “Any time you put an ash cloud up into the atmosphere, the 
airlines, the air carriers, air freight companies — it’s a major concern,” he said. The ash 
cloud was significant enough to raise the alert level from yellow, representing elevated 
unrest, to orange, representing an increased potential of eruption, or an eruption under 
way with minor ash emissions or no emissions. Cleveland Mountain is a 5,675-foot 
peak on uninhabited Chuginadak Island about 940 miles southwest of Anchorage. The 
Federal Aviation Administration and the airline industry get concerned for trans-Pacific 
flights when an ash cloud has the potential to exceed the 20,000-foot threshold, as 
Cleveland Volcano has done in the past. 

Source: http://www.usatodav.com/weather/story/2011-12-29/alaska- volcano- 
travel/5 2274 100/1 



16. December 29, WPRO 630 AM Providence - (Rhode Island) Freight train derails in 
East Prov., causes road closure. A freight train derailed in East Providence, Rhode 
Island, December 29, causing Dexter Road to be closed to traffic for several hours. The 
derailment happened around 10:30 a.m. at the railroad crossing of Dexter Road and 
King Phillip Road. One box car and an engine were derailed. The Providence 
Worcester Railroad company called for a crane to be brought to East Providence from 
Worcester to correct the situation. The road is the only access to a number of 
businesses in the industrial park. In addition to the road closure, power to the area had 
been temporarily shut off as a safety measure. Fire crews, police, and hazmat crews 
responded to the scene. Flazmat said they were on the scene as a precaution because the 
train has a diesel engine. The train was carrying lumber, two conductors, and several 
workers. The train was put back on the tracks and Dexter Road was reopened. 

Source: http://630wpro.com/article.asp?id=2362792 

For more stories, see items 5 and 24 
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Postal and Shipping Sector 

17. December 28, KSAZ 10 Phoenix - (Arizona) Smoke bomb found in mail drop off 
box. A smoke bomb was discovered December 27 inside a mail drop off box in 
Phoenix. There was a message scrawled on the side of the mail box, but it was not yet 
clear if it was related to the bomb. Hazmat crews were called to the scene to check out 
the chemicals and device. There are no leads on who may have placed it there. 

Source: http://www.mvfoxphoenix.com/dpp/news/crime/smoke-bomb-found-in-mail- 
drop-off-box- 1228201 1 
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For another story, see item 13 
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Agriculture and Food Sector 

18. December 30, Associated Press - (Massachusetts) Mass, recalls cheese over possible 
contamination. Massachusetts health officials are urging consumers not to eat cheese 
under the brand Fromagerie Marie Kade because it may be contaminated with 
potentially fatal listeria, the Associated Press reported December 30. The Canadian- 
made cheese was sold in markets in Norwood and Worcester, and is stamped with the 
establishment number 1874. No illnesses have been reported in Massachusetts in 
connection with the cheese. The state Public Health Department points out that the 
cheese has not expired, so it may still be in some homes. 

Source: http://www.wvnstv.com/storv/16417047/mass-recalls-cheese-over-possible- 
contamination 



[ Return to top ] 



Water Sector 



19. December 29, Arlington Heights Daily Herald - (Illinois) FAA fuel spill in Aurora 
cleared from Fox River. Only a faint smell of diesel remained December 29 on the 
Fox River in Aurora, Illinois, after more than 1,400 gallons of fuel spilled a day earlier 
into a storm sewer that discharges into the waterway. An Illinois Environmental 
Protection Agency spokesman said the water in the Fox River no longer has any sheen 
on it from the fuel. Crews worked through the night December 28 to contain the spill, 
which originated from a Federal Aviation Administration (FAA) facility. FAA officials 
informed the Aurora Fire Department that between 20 and 100 gallons of fuel had 
overflowed through the top of a malfunctioning underground fuel storage tank onto the 
pavement and into a Fox Metro Water District sanitary sewer. Around 10 a.m., 
however, the FAA informed city officials that the spill was actually between 1 ,000 and 
1,500 gallons and that it had entered a city storm sewer. Crews from the city’s fire, 
water and sewer, and water production departments were immediately dispatched to the 
scene. The Illinois Environmental Protection Agency was also informed of the spill. 
Absorbent booms were placed at the entrances and exits of the affected storm lines to 
absorb fuel. An unknown quantity of fuel did flow into the Fox River at Sullivan Road. 
On December 28 there was an approximately 8-foot- wide sheen on the river’s west 
bank extending for about 1.5 miles. By December 29, the booms were still in place but 
the river was clear. 

Source: http://www.dailvherald.com/article/201 1 1229/news/7 12299860/ 

For more stories, see items 2 and 33 
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Public Health and Healthcare Sector 



20. December 29, Associated Press - (California) Private medical records breach at 
Calif, hospital. A Loma Linda University Medical Center worker has been fired for 
taking home the private medical records of more than 1,000 patients, the Associated 
Press reported December 29. A hospital spokeswoman said the records from the Loma 
Linda, California hospital included birth dates, addresses, medical records numbers, 
driver’s license numbers and, in some cases, Social Security numbers. The records of 
1,336 patients or those responsible for paying the patients’ bills were breached around 
December 19. The Riverside Press-Enterprise said the medical center will pay for one 
year of credit monitoring to determine if there is irregular activity on their accounts. 
The employee who took home the documents against hospital policy has been fired. 
The San Bernardino County Sheriff’s Department, the state Public Health Department, 
and those whose records were involved in the breach have been notified. 

Source: http://www.mercurynews.com/breaking-news/ci 19638706 



[ Return to top ] 



Government Facilities Sector 



21. December 30, Associated Press - (Texas) 2 charged in $918,000 theft from Texas 
Army Post. A San Antonio, Texas woman and an unidentified former military member 
have been charged with selling about $918,000 in computers and uniforms stolen from 
Fort Sam Houston, the Associated Press reported December 30. A federal indictment 
alleges the woman and the ex-service member spent the money on five homes, credit 
card bills, and other items. They are charged with theft of federal property, aggravated 
identity theft, conspiracy to launder money, and money laundering. The San Antonio 
Express News reported that the woman appeared in federal court the week of December 
26 and was arrested. Her alleged accomplice is accused of forging paperwork that made 
the thefts possible. They face a maximum of 20 years in prison if convicted. 

Source: 

http://www.kbtx.eom/home/headlines/2 Charged in 918000 Theft from Texas Arm 
y Post 136427688.html 

22. December 29, Washington Examiner - (Maryland) Flood caused $14 million in 
damage to Prince George’s government building. Repairs to the Prince George’s 
County administration building in Maryland will cost between $14 million and $15 
million, according to county officials, with most of it not covered by the county’s 
insurance policies, the Washington Examiner reported December 29. The home of the 
county’s executive and legislative branches and a host of other county government 
functions was closed for days in September after 2 feet of flood water caused by 
Tropical Storm Lee destroyed much of the building’s ground floor. Prince George’s 
officials had anticipated coverage of up to $50 million at the time of the flood, but the 
building and a nearby warehouse also damaged by rising waters are located in flood 
zones that lower the county’s coverage, a spokesperson said. About $8 million must be 
spent to repair 14,000 boxes of documents damaged by the flood. The documents, 
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mostly records kept by the clerk of the Circuit Court, had been stored in the 
administration building, as well as the nearby warehouse. The remaining $7 million to 
$8 million will cover the costs of gutting and rebuilding the ground floor, a spokesman 
said. 

Source: http://washingtonexaminer.com/local/marvland/2011/12/flood-caused-14- 
million-damage-pg-govemment-building/2045376 
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Emergency Services Sector 

23. December 29, WNCN 17 Raleigh - (North Carolina) Ambulance catches fire at 

Raleigh EMS station. A mechanical failure was to blame for a fire December 29 at an 
EMS station in Raleigh, North Carolina. An ambulance in one of the bays caught fire, 
which subsequently spread to another building. An incident report said the fire was 
likely caused by a mechanical failure in the engine compartment of the ambulance. 
Wake County Communications said the ambulance was heavily damaged and is no 
longer operational. The ambulance bay had significant roof damage and the living 
quarters had heavy smoke damage. Damage estimates for the ambulance total 
$240,000. EMS crews will work out of an alternate location while the building is 
weatherproofed and secured. The Wake County General Services Administration is 
evaluating similar models of County ambulances to ensure safety. 

Source: http://www2.nbcl7.com/news/201 l/dec/29/2/ambulance-catches-fire-raleigh- 
ems-station-ar-1761610/ 



24. December 29, Associated Press - (Georgia) Prisoner transport bus overturns near 
Macon, Ga.; several inmates reported injured. The Georgia Department of 
Corrections said several inmates were injured in an accident involving a prisoner 
transport bus on Interstate 16. Officials said the bus overturned in Twiggs County, 
Georgia, early December 29. A Georgia State Patrol spokesman said a passenger car 
cut in front of the bus, causing the driver to take evasive action. He said the bus rolled 
over on its side. The Department of Corrections said 1 1 inmates were on the bus that 
had left the Georgia Diagnostic and Classification Prison in Jackson and was headed to 
Coastal State Prison in Garden City near Savannah. They said two staff members were 
on board the bus, and that no other vehicles were involved. Officials say none of the 
injuries were life-threatening. 

Source: 

http ://w w w .therepublic .com/view/storv/6bbdbcbc9a 1 e4efea2b72f34f7c8 8 1 8a/GA— 
Prison-Bus-Accident/ 



For another story, see item 13 
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Information Technology Sector 



25. December 30, Softpedia - (International) Your smartphone from Amazon has 
shipped, malware-spreading spam. Softpedia reported December 30 a malware scam 
involving an e-mail allegedly sent by Amazon to confirm that an electronic device such 
as a smartphone has already been paid for with the recipient’s credit card. Users who 
click on the links contained in the message are taken to a Web site that serves a variant 
of Cridex, especially designed to steal personal and financial information from the 
computer it lands on, according to Hoax Slayer. Win32/Cridex is usually delivered via 
spammed malware such as variants of Exploit:JS/Blacole and is programmed to spread 
to removable drives. Besides banking credentials, it also targets local certificates and it 
is able to execute files. Once executed, the malicious element drops a copy of the worm 
as a randomly named file and modifies the registry to make sure it is executed each 
time the operating system boots. After the dropper is deleted, Cridex injects itself into 
every running process, even ones that are later created. 

Source: http://news.softpedia.com/news/Your-Smarthpone-from-Amazon-Has- 
Shipped-Malware-Spreading-Spam-243839.shtml 

26. December 30, The Register - (International) Kaspersky claims ‘smoking code’ 
linking Stuxnet and Duqu. Researchers at Kaspersky Lab claimed to have found proof 
that the writers of the Stuxnet and Duqu malware are one and the same, and are 
warning of at least three new families of advanced malware potentially in circulation, 
The Register reported December 30. The chief security expert at Kaspersky Lab said 
that researchers had examined drivers used in both Stuxnet and Duqu and concluded 
that a single team was most likely behind them both, based on the timing of their 
creation and their methods of interacting with the rest of the malware code. The 
researcher’s data suggests both were built on a common platform, dubbed Tilded 
because it uses many files beginning with the tilde symbol and the letter “d.” The 
platform was built around 2007 or later, and was updated in 2010. Kaspersky’s director 
of global research and analysis told Reuters that the platform and drivers involved 
would indicate five families of malware had been made using the platform already, and 
that others may be in development. The modularity of the systems makes it easy for the 
malware writers to adapt their creations to new purposes and techniques. 

Source: http://www.theregister.co.uk/2011/12/30/kaspersky stuxnet duqu link/ 

27. December 29, CNET News - (International) Anonymous targets military-gear site in 
latest holiday hack. In what it is calling another round of “LulzXmas festivities,” an 
Anonymous-affiliated hacktivst group December 29 claimed to have stolen customer 
information from SpecialLorces.com, a Web site that sells military gear. The hackers 
said they breached the SpecialLorces.com site months ago, but only just got around to 
posting the customer data. Even though the site’s data was encrypted, they claim to 
have 14,000 passwords and details for 8,000 credit cards belonging to Special Lorces 
Gear customers. Special Lorces Gear’s founder confirmed that his company’s Web 
servers were compromised by Anonymous in late August, resulting in a security breach 
that allowed the hackers to obtain customer usernames, passwords, and possibly 
encrypted credit card information in some cases. He added that the compromised 
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passwords were from a backup of a previous version of the Web site that is more than a 
year old, and that most of the credit card numbers are expired. No evidence of credit 
card misuse was found, and the site no longer stores customer passwords or credit card 
information. 

Source: http://news.cnet.com/8301-1009 3-57349976-83/anonymous-targets-military- 
gear-site-in-latest-holiday-hack/?part=rss&subi=latest-news&tag=title 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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28. December 30, PC Magazine - (National) Verizon attributes 4G LTE service 
disruptions to ‘growing pains’. Verizon Wireless December 29 attributed recent 
service disruptions on its 4G LTE network to “growing pains” associated with building 
out an advanced network. Verizon’s network has experienced three separate disruptions 
this month: on December 7, 21, and 28. During those incidents, Verizon said it 
“proactively moved” customers from 4G LTE to 3G, though for a brief period 
December 28, “4GLTE customers could not connect to the 3G Network as quickly as 
we would have liked,” a press release from Verizon said. “Each incident has been 
different from a technical standpoint,” Verizon said. Verizon’s statement did not go 
into full detail, but in an interview with GigaOm, the vice president of network 
engineering for Verizon Wireless said the problems were associated with something 
known as the IP Multimedia Subsystem (IMS), or Verizon’s service delivery core. As 
GigaOm explained, IMS has been in use for years, but Verizon is the first to use it for a 
4G LTE network. That has produced some problems, like the widespread outage that 
hit the company’s network back in April. This time around, there were three separate 
incidents. “The first outage on Dec[ember] 7 was caused by the failure of a back-up 
communications database,” GigaOm reported. “The second, last week, was the result of 
an IMS element not responding properly, while [the December 28] outage was caused 
by two IMS elements not communicating properly.” Essentially, some phones just kept 
trying to sign in to 4G without success until Verizon forced them to drop down to 3G. 
Verizon said it is taking a number of steps to prevent similar outages in the future. 
Source: http://www.pcmag.com/article2/0,2817,2398203,00.asp 
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Commercial Facilities Sector 



29. December 30, Associated Press - (New York) Man dies in fire at suburban Buffalo 
motel; reports of explosion before blaze in Clarence. Authorities are investigating 
the cause of a fire at a suburban Buffalo, New York motel that claimed the life of a man 
who was staying there. The incident occurred December 29 at the Rock Garden Motel, 
a 17-unit complex about 10 miles east of Buffalo. Reports of an explosion at the motel 
were also received by dispatchers. Officials say flames were pouring from the front 
apartment in the complex when firefighters arrived. The body of a man was found in 
one of the apartments. His name and age have not been released. Five other people 
staying at the motel got out safely. The building was heavily damaged. The cause of the 
fire has yet to be been determined. 

Source: 

http://www.therepublic.com/view/storv/504f03d0e3be4bl49a40d6caac98b213/NY~ 

Motel-Fatal-Fire/ 



30. December 30, KBTX 3 Bryan/College Station - (Texas) Texas hotel worker falls in 
elevator shaft, dies. A housekeeper has died after falling six stories in a service 
elevator shaft in the San Antonio, Texas, hotel where she was working. Federal and 
state officials are investigating. Her body was found at the bottom of the elevator shaft 
December 28. The San Antonio Express-News reported December 30 that police were 
called after hotel employees heard a loud noise from the elevator shaft but could not 
open the basement elevator doors. Investigators form the Texas Department of 
Licensing and Regulation and Occupational Safety and Health Administration are 
trying to determine what happened. 

Source: 

http://www.kbtx.com/state/headlines/Texas Hotel Worker Falls In Elevator Shaft D 
ies 136431658.html 



31. December 29, The Plain Dealer - (Ohio) Stolen gas pipes lead to evacuation of six 
homes, apartment on Cleveland’s East Side. Six homes and one apartment building 
in Cleveland, Ohio, were temporarily evacuated December 29 after thieves stole pipes 
from a home, filling the house with natural gas that leaked into the neighborhood. 
Police found the back door open after a caller said the house had been entered. Police 
smelled gas in the kitchen and called the fire department. A Cleveland Fire Department 
spokesman said a battalion chief entered the home with a meter and found the gas 
reading was “off the charts.” The area was then taped off and Dominion East Ohio Gas 
was called to shut the gas off. Workers noticed gas pipes had been stolen from the 
occupied home, where the spokesman said no one was home at the time of the theft. 
Within two hours, residents were allowed to return to their homes and the apartment 
building. 

Source: 

http://blog.cleveland.com/metro/2011/12/six homes apartment temporaril.html 

32. December 29, Lancaster Intelligencer Journal; Lancaster New Era - (Pennsylvania) 3- 
alarm fire hits Columbia recycling business. A three-alarm fire struck a recycling 
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business in Columbia, Pennsylvania, December 28, officials said. Units were 
dispatched shortly after 10 p.m. to Gordon Waste Co. for a fire in the conveyor system. 
Four people working in the building evacuated safely without injury, the Columbia 
Borough fire chief said. About 150 firefighter personnel from Lancaster and York 
counties worked throughout the night. The fire started accidentally because of friction 
and was contained to an area of about 15,000 square feet. “Workers were cleaning up 
the facility like they do every day, using Bobcat skid loaders, pushing scrap paper into 
the recycling compactor,” the Columbia Borough fire chief stated. When the fire was 
discovered, they tried to knock it down with multiple fire extinguishers, but the blaze 
quickly grew beyond their control. “There doesn’t appear to be any major structural 
damage to the building,” a vice president and partner of Gordon Waste stated. 

Source: http://lancasteronline.com/article/local/558665 3-alarm- fire-hits-Columbia- 
recycling-business.html 

For more stories, see items 16, 33, and 34 
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33. December 30, CNN - (Pennsylvania) Graves may be exhumed over Pennsylvania 
sinkhole. Officials in Pennsylvania may give the go-ahead to begin the exhumation of 
graves as a large sinkhole encroaches on a historic Allentown cemetery, CNN reported 
December 30. A court order has been secured so that the Lehigh County coroner can 
give the order if he deems such action necessary. The sinkhole measures about 50 feet 
long and 30 feet wide, according to the Allentown fire chief. About 60 graves in Union 
and West End Cemetery are threatened and were roped off. A dozen homes nearby 
were vacated and 25 people evacuated because of the sinkhole. The sinkhole was likely 
caused by a water main break. The cemetery holds about 20,000 graves, including 714 
Civil War veterans, whose graves are located across the cemetery. At least two 
residential structures nearby suffered serious damage from the sinkhole. 

Source: http://www.cnn.com/2011/12/30/us/pennsvlvania- 
sinkhole/index.html?hpt=hp t3 

34. December 29, Associated Press; Kansas City Star - (Missouri) Fire engulfs historic 
Kansas City church. A landmark church that is home to one of the oldest 
congregations in Kansas City, Missouri, has gone up in flames. Firefighters responded 
December 29 to the massive blaze at the 107-year-old Westport Presbyterian Church at 
the eastern end of the city’s Westport neighborhood. The Kansas City Star reported 
firefighters used at least three aerial trucks to battle flames shooting 50 feet in the air. 
The stone church was built in 1904, although the congregation has been in existence for 
175 years. 

Source: http://washingtonexaminer.com/news/201 1/1 2/firc-cngulfs-historic-kansas- 
city-church/2045866 
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Dams Sector 



35. December 28, Glen Falls Post-Star - (New York) Fort Ann to receive $3.48M in 
Hadlock Pond settlement. The town of Fort Ann, New York, is expected to receive 
the $3.48 million it is owed from the settlement in the Fladlock Pond collapse, the Glen 
Falls Post-Star reported December 28. Kubricky Construction Co., the builder of the 
Hadlock Pond dam — which broke in 2005, just months after its completion — has 
agreed to pay the town, nine months after forging an initial agreement on the terms of 
the settlement. In 2010, a jury found the company had the largest degree of fault, and 
the town expected to receive $3.9 million from three parties: Kubricky; the dam’s 
designer, HTE Engineering Northeast; and the dam’s tester, Atlantic Testing 
Laboratories. Kubricky was due to pay $3.48 million of that total, but the company’s 
lawyers wanted to absolve the company from future litigation. In November, lawyers 
for the company and town went to a state Supreme Court justice to seek a decision on a 
breach of contract claim that was holding up the settlement. The town and company 
will sign documents guaranteeing the $3.48 million will be paid, provided several 
conditions are met, the town attorney said December 28 at a special board meeting. 
Among those conditions, the town will discontinue legal claims in Albany County court 
against Kubricky, and Kubricky will stop a breach of contract action against the town. 
The town will still be able to pursue a bad faith claim against Liberty Mutual insurance 
company in Albany County Court. Some 90 owners of properties upstream from the 
dam, who are seeking legal action because of access issues to the pond and declining 
property values, will retain their rights to continue legal action. 

Source: http://poststar.com/news/local/fort-ann-to-receive-m-in-hadlock-pond- 
settlement/article 9889e32a-31d9-llel-936d-0019bb2963f4.html 
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DHS Daily Open Source Infrastructure Report Contact Information 

About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for ten days on the Department of Homeland Security Web site: 
http://www.dhs.gov/iaipdailyreport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703)387-2267 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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